# changelog

author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Than Ngo <than@redhat.com> - 138.0.7204.157-1
changelog:
  - Update to 138.0.7204.157
    * CVE-2025-7656: Integer overflow in V8
    * CVE-2025-7657: Use after free in WebRTC
    * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU


author: Than Ngo <than@redhat.com> - 138.0.7204.168-1
changelog:
  - Update to 138.0.7204.168
    * CVE-2025-8010: Type Confusion in V8
    * CVE-2025-8011: Type Confusion in V8


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 24.2-5
changelog:
  - Backport fixes for CVE-2024-6174 and CVE-2024-11584
  - cloud-init included the systemd socket unit cloud-init-hotplugd.socket
    with default SocketMode that grants 0666 permissions, making it world-
    writable. An unprivelege user could trigger hotplug-hook commands
    (CVE-2024-11584)


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui to 0.1.18
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
  - Added cockpit-ha-cluster subpackage that adds pcs-web-ui as a Cockpit application


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.0-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2341012
  - New subpackage pcs-web-ui - enables standalone web UI when the subpackage is installed on the system (default), uninstall the subpackage to disable the web UI
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.22
  - Fixes for compatibility with Ruby 3.4
    Resolves: rhbz#2331005


author: Michal Pospíšil <mpospisi@redhat.com> - 0.12.1-1
changelog:
  - Rebased pcs to the newest major version (see CHANGELOG.md)
    Resolves: rhbz#2371770
  - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.23 (see CHANGELOG_WUI.md)
  - There is now a changelog for the HA Cluster Management Cockpit application and the standalone web UI in both packages
  - The upstream version of pcs-web-ui can now be queried through RPM in both packages - see bundled(pcs-web-ui)
  - Updated bundled Python dependency dacite
  - Compatibility with rubygem-rack >= 3
    Resolves: rhbz#2372462


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Petr Pisar <ppisar@redhat.com> - 5.2.12.0-2
changelog:
  - Set a mode for ghost files to 0644 (bug #2343342)
  - Respect install root in expired-pgp-keys plugin (bug #2356528)
  - Add "-i" and "-f" short options for repoquery command (bug #2338174)
  - Document environment variables for a terminal and temporary files
    (bug #2353349)


author: Marek Blaha <mblaha@redhat.com> - 5.2.14.0-2
changelog:
  - Remove incorrect dnfdaemon output parameter names (https://github.com/rpm-software-management/dnf5/issues/2317)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.23.0-3
changelog:
  - Ignore fedpkg mockbuild generated artifacts
  - Ignore generated rpms and results_ sub-directory generated by fedpkg
    during mockbuild


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.24.0-1
changelog:
  - Update package to release v0.24.0
  - Resolve: rhbz#2366388, rhbz#2360632
  - Upstream fixes and changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.36.1-1
changelog:
  - Update to release v2.36.1
  - Resolves: rhbz#2367247, rhbz#2360592, rhbz#2353097, rhbz#2352158
  - Improvements and fixes. See upstream changelog


author: Mike FABIAN <mfabian@redhat.com> - 2.27.59-1
changelog:
  - Update to 2.27.59
  - Make Super prefix ('s-') work when using an m17n input method using that
    prefix (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/712)
  - Update emoji-data.txt, emoji-sequences.txt, emoji-test.txt, emoji-
    variation-sequences.txt, emoji-zwj-sequences.txt to the Unicode 17.0.0
    draft as of 2025-05-14
  - Update UnicodeData.txt, DerivedAge.txt, NameAliases.txt to the Unicode
    17.0.0 draft as of 2025-05-14
  - Update emoji annotations from CLDR
  - When _command_show_selection_info() can not get a selection, use the
    grapheme cluster directly left of the cursor as a fallback (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/733)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.63-1
changelog:
  - Update to 2.27.63
  - Make non-ASCII input work in m17n_translit.py also for the more exotic
    prefixes (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/745)
  - Make database code more robust (Should fix some problems on FreeBSD)
  - Fix quoting for sqlite3 (Should fix some problems on FreeBSD)
  - Improve _xorg_locale_path() to find the path as well on FreeBSD
  - Add `Categories=Settings;` to the ibus-setup-typing-booster.desktop file
    (from the FreeBSD port)
  - Fix HunspellSuggestTestCase.test_sv_SE to work with sv_SE.dic as on
    Fedora 42 **and** on FreeBSD
  - Add preedit representations for the special dead keys used in the "French
    (BEPO, AFNOR) layout (Related: https://github.com/ibus/ibus/pull/2763
  - Improve regexp for msymbol patterns triggering commits (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/712)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (es 100%, it 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.64-1
changelog:
  - Update to 2.27.64
  - Do not start each transliteration with `minput_reset_ic()` to keep the
    m17n-lib state between commits (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/746)
  - Update emoji annotations from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 2.27.65-1
changelog:
  - Update to 2.27.65
  - Make the command `show-selection-info` work always, not only when
    “Minimum number of chars for completion” is 0 (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/757)
  - Make default symbols black and white when running on Gnome and gnome-
    shell ≥ 49.0 (See: https://gitlab.gnome.org/GNOME/gnome-
    shell/-/merge_requests/3753)
  - Enable translations for 5 more tooltips, use same texts as in the
    gsettings schema file
  - Make the symbols for active input mode and direct input mode configurable
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/749)
  - Make compose preedit representations configurable by changing the Compose
    file(s) (See:
    https://github.com/ibus/ibus/issues/2748#issuecomment-2944388273)
  - Translation update from Weblate (de 100%, ja 99.6%, ka 100%, pl 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.66-1
changelog:
  - Update to 2.27.66
  - Improve show_selection_info command behaviour when getting the
    surrounding text fails (Return True, not False in that case)
  - Use `SurroundingText` dataclass to track surrounding text state; use
    `get_surrounding_text()` only to trigger an update
  - Use @dataclass always, also for Python 3.6
  - Don’t use transliterated keys for compose sequences if the first input
    method is Japanese or Chinese (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/760)
  - Translation update from Weblate (ko 100%, sv 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.67-1
changelog:
  - Update to Release 2.27.67
  - Add time.sleep(self._ibus_event_sleep_seconds) after early commits of an
    m17n candidates (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/764)
  - Translation update from Weblate (es 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.68-1
changelog:
  - Update to 2.27.68
  - Do not try to point the popovers on search results directly to the emoji
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/766)
  - Translation update from Weblate (el 31.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.69-1
changelog:
  - Update to 2.27.69
  - In the show-selection-info command: if using surrounding text fails, fall
    back to the primary selection. Makes it work in google-chrome, terminals,
    ... (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/768)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.70-1
changelog:
  - Update to 2.27.70
  - Add selection-to-preedit command (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/769)
  - Translation update from Weblate (fi 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.27.71-1
changelog:
  - Update to 2.27.71
  - Add a new gsettings option `emojistyle` and make it changeable with a
    `toggle_emoji_style` command (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/774)
  - Fix list of sentence ending characters to avoid incorrect auto-
    capitalization (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/773)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (de 100%, es 99.2 %, it 98.5%, ja
    100%)


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.63-1
changelog:
  - add LICENSE.Sigma from sigrok-firmware
  - Add public-domain text for python-zmq
  - add public domain for mg


author: Miroslav Suchý <msuchy@redhat.com> 1.64-1
changelog:
  - add copyleft-next-0.3.1 license
  - Add public-domain text for llvm-test-suite
  - document usage exception for fedora-remix-logos
  - add MIPS and ThirdEye licenses
  - add libcsv UltraPermissive dedication
  - Add public-domain text for stb


author: Miroslav Suchý <msuchy@redhat.com> 1.65-1
changelog:
  - Add BSD-3-Clause WITH AdditionRef-WebM-patent license
  - add public domain dedication in desktop-backgrouds
  - mark OFL-1.1-RFN and OFL-1.1-no-RFN as equal
  - ultrapermissive dedication of broda from crosswords package


author: Miroslav Suchý <msuchy@redhat.com> 1.66-1
changelog:
  - Mark LicenseRef-CRC32 as deprecated
  - allow packages that includes or bundle ccan as an exception
  - add LicenseRef-Julius-dictation-kit as not allowed
  - add Seiko-Epson license to firmware
  - add public domain findings for sc
  - add ultra permissive dedication of perl-Math-FFT
  - add aastr ultra permissive dedication
  - add GPL-2.0-or-later WITH mif-exception
  - add public domain dedication for libtelnet
  - Add PHP-3.0
  - LicenseRef-Fedora-Public-Domain: Add zpaqfranz


author: Miroslav Suchý <msuchy@redhat.com> 1.67-1
changelog:
  - add autossh man page ultra permissive dedication
  - add LGPL-2.1-only WITH Digia-Qt-LGPL-exception-1.1
  - add jove license
  - add man2html license
  - add DocBook-DTD license
  - add BSD-2-Clause-pkgconf-disclaimer
  - correct expression of PHP-3.0
  - Add SpacemiT esos.elf license as allowed-firmware
  - Add 7zip public domain headers
  - add Game-Programming-Gems license
  - add LGPL-2.1-or-later WITH polyparse-exception
  - add GPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - enhance BSD-3-Clause-Clear usage text
  - document known exception for kernel for BSD-3-Clause-Clear
  - add LicenseRef-Hauppauge-firmware-eula as not allowed
  - add LicenseRef-Hauppauge as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.68-1
changelog:
  - add CC-SA-1.0 as allowed-content
  - allow golang-x-perf to use CC-BY-4.0 for code as an exception
  - add GPL-3.0-or-later WITH Libtool-exception
  - UltraPermissive: Add a text found in libisds
  - add LicenseRef-Geotrans as not-allowed
  - Add public-domain dedication for jemalloc/rust-tikv-jemalloc-sys
  - add Aspell-RU
  - add ngrep
  - add Unlicense-libwhirlpool
  - add Unlicense-libtelnet
  - add CDLA-Permissive-2.0
  - add BSD-3-Clause WITH AdditionRef-Dart
  - add UltraPermissive dedication of autossh


author: Miroslav Suchý <msuchy@redhat.com> 1.70-1
changelog:
  - add GPL-2.0-only WITH Universal-FOSS-exception-1.0
  - add libpng licenses
  - add UltraPermissive dedication of tolua++
  - add note and link that APSL-1.x can be used as APSL-2.0
  - add LicenseRef-Remix-icon as not-allowed
  - describe how to use LicenseRef-IUPAC-InChI-Trust
  - Add public-domain dedication for dcm2niix
  - add LicenseRef-Aalok-Everfree as not-allowed
  - add public domain dedication of libtommath
  - add public domain dedication of heimdal


author: Owen Taylor <otaylor@redhat.com> - 1.0-1
changelog:
  - Version 1.0
  - Add 'flatpak-module init'
  - Support zstd compressed repository metadata
  - Disable min-free-space check for ostree repositories
  - Handle RPMs with different versions for different subpackages
  - Provide a better error message during dependency resolution when
    the runtime is out of date.


author: Steven Presti <spresti@redhat.com> - 2.21.0-2
changelog:
  - Rename ignition.cfg -> 05_ignition.cfg to mirror upstream
    additionally backport rename.
  - Rename ignition-ignition-grub subpackage to ignition-grub
  - Update grub2 config to use the correct dir for bootupd static grub configs
    https://github.com/coreos/ignition/pull/2037#issuecomment-2736300056


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.1-0]
changelog:
  - arm64: dts: rockchip: Drop assigned-clock* from cpu nodes on rk3588 (Diederik de Haas)
  - arm64: dts: rockchip: Improve LED config for NanoPi R5S (Diederik de Haas)
  - arm64: dts: rockchip: Move rk3568 PCIe3 MSI to use GIC ITS (Chukun Pan)
  - arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-quartz64-b (Diederik de Haas)
  - arm64: dts: rockchip: Add phy-supply to gmac0 on NanoPi R5S (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3588-rock-5b (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-rockpro64 (Diederik de Haas)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3328-rock64 (Diederik de Haas)
  - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan)
  - arm64: dts: rockchip: Add gmac phy reset GPIO to QNAP TS433 (Uwe Kleine-König)
  - arm64: dts: rockchip: Correct gmac phy address on QNAP TS433 (Uwe Kleine-König)
  - Reset build id for fedora-srpm script (Justin M. Forbes)
  - redhat/configs: Add configs for new ov02c10 and ov02e10 drivers (Hans de Goede)
  - media: i2c: Add Omnivision OV02C10 sensor driver (Heimir Thor Sverrisson)
  - media: i2c: ov02e10: add OV02E10 image sensor driver (Jingjing Xiong)
  - platform/x86: int3472: Debug log when remapping pins (Hans de Goede)
  - platform/x86: int3472: Add handshake pin support (Hans de Goede)
  - platform/x86: int3472: Prepare for registering more than 1 GPIO regulator (Hans de Goede)
  - platform/x86: int3472: Avoid GPIO regulator spikes (Hans de Goede)
  - platform/x86: int3472: Make regulator supply name configurable (Hans de Goede)
  - platform/x86: int3472: Rework AVDD second sensor quirk handling (Hans de Goede)
  - platform/x86: int3472: Drop unused gpio field from struct int3472_gpio_regulator (Hans de Goede)
  - platform/x86: int3472: Stop setting a supply-name for GPIO regulators (Hans de Goede)
  - platform/x86: int3472: Add skl_int3472_register_clock() helper (Hans de Goede)
  - powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.16 cycle (Justin M. Forbes)
  - fedora: add 'fedora' SBAT suffix for UKI addons (Li Tian)
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito)
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito)
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito)
  - Linux v6.15.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.2-0]
changelog:
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Justin M. Forbes)
  - Linux v6.15.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.15.2-0]
changelog:
  - wifi: ath12k: support MLO as well if single_chip_mlo_support flag is set (Baochen Qiang)
  - wifi: ath12k: use fw_features only when it is valid (Baochen Qiang)
  - wifi: ath12k: introduce ath12k_fw_feature_supported() (Baochen Qiang)
  - aarch64: Switch TI_SCI_CLK and TI_SCI_PM_DOMAINS symbols to built-in (Peter Robinson)
  - redhat/configs: fedora: set some qcom clk, icc, and pinctrl drivers to built in (Brian Masney)


author: Augusto Caringi <acaringi@redhat.com> [6.15.6-0]
changelog:
  - Turn on MITIGATION_TSA for RHEL configs (Augusto Caringi)
  - Turn on TSA Mitigation for Fedora (Justin M. Forbes)
  - Linux v6.15.6


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Ales Matej <amatej@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Fix and update lr_download_metadata API to enable parallel downloading of repos


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Jerry James <loganjerry@gmail.com> - 2.2.0-1
changelog:
  - Version 2.2.0
  - Fix the VCS field
  - Sort BRs and Rs so I can tell what is there
  - Allow parallel builds


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Packit <hello@packit.dev> - 131-1
changelog:
  Changes with 131
  ----------------
    * Update snapshots to 20250201 (#4591)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou
    * cloudapi: Add /distributions/ to cloudapi (#4336)
      * Author: Brian C. Lane, Reviewers: Gianluca Zuccarelli

  — Somewhere on the Internet, 2025-02-05


author: Packit <hello@packit.dev> - 135-1
changelog:
  Changes with 135
  ----------------
    * CI: Update slack notifications and remove Alex (#4623)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Simon Steinbeiß, Tomáš Hozza
    * CODEOWNERS: set people for `/templates` (#4636)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * Preparation for RHEL 9.7 and 10.1 (COMPOSER-2451) (#4629)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Ondřej Budai
    * Update snapshots to 20250225 (#4626)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Use golangci-lint v1.60 and cleanup the errors it returns (#4612)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Florian Schüller
    * cloudapi: Use constants for distro in compose_test.go (#4620)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Michael Vogt
    * internal/cloud/gcp/compute: Add TDX_CAPABLE guest OS feature (#4587)
      * Author: Beñat Gartzia, Reviewers: Ondřej Budai, Tomáš Hozza
    * tests/CI: Disable installer test for RHEL 10.0 nightly (#4634)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tests/CI: Re-enable the vmware tests on RHEL 10 (#4577)
      * Author: Tomáš Koscielniak, Reviewers: Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2025-03-05


author: Packit <hello@packit.dev> - 136-1
changelog:
  Changes with 136
  ----------------
    * Return compose request details as part of metadata response (#4451)
      * Author: Brian C. Lane, Reviewers: Florian Schüller, Tomáš Hozza
    * cloudapi: silence logrus in tests (#4614)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * go.mod: update osbuild/images to v0.123.0 (#4642)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß, Simon de Vlieger
    * templates/dashboards: increase timespan readability (#4633)
      * Author: Florian Schüller, Reviewers: Gianluca Zuccarelli, Sanne Raymaekers

  — Somewhere on the Internet, 2025-03-19


author: Packit <hello@packit.dev> - 137-1
changelog:
  Changes with 137
  ----------------
    * Add modularity support (#4644)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Advanced partitioning customizations in cloud API (COMPOSER-2403) (#4650)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers
    * Fix: osbuild-composer is not able to build RHEL-8 images since RHEL-9.5 (RHEL-71397) (#4651)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Schutzfile: bump osbuild to 142 (#4653)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Test/api.sh/vsphere: configure cloud-init via VM's extraConfig (#4664)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * cloudapi/v2: mark md5 signature as required in package metadata (#4654)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou
    * go.mod: bump github.com/getkin/kin-openapi to v0.131.0 (#4655)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Ondřej Budai
    * test: migrate the openshift virt test to a new cluster (COMPOSER-2458) (#4647)
      * Author: Ondřej Budai, Reviewers: Tomáš Koscielniak

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 138-1
changelog:
  Changes with 138
  ----------------
    * GH Action: check the SPEC osbuild/images deps minimum version (#4669)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * client/blueprints_test.go: delete condition for composer version < 83 (#4673)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 141-1
changelog:
  Changes with 141
  ----------------
    * Add templates to subscription image options (HMS-6050) (#4712)
      * Author: rverdile, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Replace logrus with log (#4715)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Test/cross-distro: add version check for cross-building el8 on el9 (#4706)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane
    * Test/cross-distro: fix one issue and make the test more robust on "ZStream" branches (#4694)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Fix missing specs for koji ContainerResolve (#4709)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: drop ImageRequest.GetImageOptions() method (#4711)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * go.mod: bump images to v0.144.0 (#4718)
      * Author: Sanne Raymaekers, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    * go.mod: update osbuild/images to v0.143.0 (#4713)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * internal: drop `internal/fsnode` package (#4714)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 142-1
changelog:
  Changes with 142
  ----------------
    * Update snapshots to 20250515 (#4724)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * templates/packer: set wanted-by to cloud-init.target (#4723)
      * Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Ondřej Budai

  — Somewhere on the Internet, 2025-05-28


author: Packit <hello@packit.dev> - 143-1
changelog:
  Changes with 143
  ----------------
    * Add job delete support (#4717)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * GH Action/create-tag: allow passing the version when run manually (#4668)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Improve OCI CI scripts (HMS-8591) (#4742)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal
    * Packer: update Fedora and RHEL images used for workers (#4733)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * gitlab: enable OCI tests (#4741)
      * Author: Achilleas Koutsou, Reviewers: Florian Schüller, Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.148.0 (#4732)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza, Tomáš Koscielniak
    * osbuild-store-dump: use `distrofactory` instead of importing fedora (#4738)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tests/CI: Add runners for RHEL 9.7 and 10.1 (HMS-6278) (#4716)
      * Author: Tomáš Koscielniak, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 145-1
changelog:
  Changes with 145
  ----------------
    * Test/repositories/el8*: use rhui-4 instead of rhui-3 (#4665)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Michael Vogt
    * Update snapshots to 20250626 (#4763)
      * Author: SchutzBot, Reviewers: Brian C. Lane, Tomáš Hozza
    * ci: introduce gobump gha (#4758)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi/v2: add patch_url to customizations (#4756)
      * Author: rverdile, Reviewers: Brian C. Lane, Tomáš Hozza
    * common: fix unclosed logrus logging pipes (#4728)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger, Tomáš Hozza
    * fix: update gobump GHA (#4761)
      * Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 146-1
changelog:
  Changes with 146
  ----------------
    *  go.mod: bump go version to 1.23.9 & update dependencies (#4760)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Preparation to consolidate Koji upload code to `osbuild/images` (HMS-8803) (#4770)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * Use Koji upload implementation from `osbuild/images` (HMS-8803) (#4772)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Use error 400 for cloudapi delete errors (#4750)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * deps: bump images to 0.164 (#4781)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * go.mod: update osbuild/images to v0.156.0 (#4773)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai, Sanne Raymaekers
    * test/ubi-wsl.sh: add backward compatibility for composer < v146 (#4784)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    * tests/CI: Add RHEL 9.6 and 10.0 GA (HMS-8726) (#4767)
      * Author: Tomáš Koscielniak, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-23


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-0.1.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-1
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.1.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc1
  - syncing with upstream spec-file (removed nagios)


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.2.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc2
  - disable docs for now as koji build shows issues with python requirements
    for inkscape


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.4.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc3,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc3
  - synced dropping inkscape build-requirement with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-5
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0
  - Regarding noteworthy changes coming with the bump of the major version see
    https://projects.clusterlabs.org/w/projects/pacemaker/pacemaker_3.0_changes/
  - add patch to when resetting scheduler as well reset error and warning flags
    lacking pcmk_reset_scheduler in 3.0.0 branch pcmk__set_scheduler_defaults
    seems to be the most reasonable alternative for now


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Aaron Merey <amerey@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi-7.2.0.
  - Remove upstreamed patches
    papi-python3.patch
    papi-libsde.patch
    papi-gcc15.patch
  - Add papi-revert-arm-test.patch.
  - Add papi-revert-event-depr.patch.


author: Petr Pisar <ppisar@redhat.com> - 0.15-36
changelog:
  - Correct a license to "(GPL-1.0-or-later OR Artistic-1.0-Perl) AND
    BSD-3-Clause"
  - Quallify bundled(mt19937ar) RPM provide with a release date
  - Package the tests


author: Adam Williamson <awilliam@redhat.com> - 1.0.3-16
changelog:
  - Backport #1964 (partial) and #2361 (rebased) to fix build with Python 3.14
  - Rebuilt for Python 3.14


author: Adam Williamson <awilliam@redhat.com> - 1.0.5-1
changelog:
  - Update to 1.0.5
  - Drop patches merged upstream
  - Backport more patches to fix build/tests and a FICS bug with Python 3.13+


author: Michel Lind <salimma@fedoraproject.org> - 4.2.14-1
changelog:
  - Update to 4.2.14 to address multiple CVEs
  - resolves CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, CVE-2024-39614


author: Michel Lind <salimma@fedoraproject.org> - 4.2.20-1
changelog:
  - Update to version 4.2.20; Fixes: RHBZ#2350882
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 4.2.22-1
changelog:
  - Update to version 4.2.22
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path
  - Revert setuptools bump; we don't need it and don't have the needed
    version
  - Rebase Python 3.13 patch


author: Packit <hello@packit.dev> - 0.32.1-1
changelog:
  - ModemManager: Add initial mock (thanks Guido Günther)
  - bluez5: Add advertising API (thanks Frederik Leonhardt)
  - Fix loading of libglib on macOS (thanks peturingi)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Michel Lind <salimma@fedoraproject.org> - 5.1.7-1
changelog:
  - Update to version 5.1.7; Fixes: RHBZ#2350881
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 5.1.8-1
changelog:
  - Update to 5.1.8
  - On Windows, this fixes CVE-2025-27556. Mentioning for compleness
  - Fixes a regression in Django 5.1.7 affecting
    LogEntryManager.log_actions() - #36234
  - Remove legacy symlinks


author: Michel Lind <salimma@fedoraproject.org> - 5.2.2-1
changelog:
  - Update to 5.2.2
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.9.5-3
changelog:
  - Add additional license terms for GlyphsInfo data files
  - Mark GlyphData license files in-place rather than installing duplicates


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.0~b3-1
changelog:
  - Update to Python 3.14.0b3
  - The .pyc magic number was bumped
  - python3.14-freethreading is no longer provisional


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


