# changelog

author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Maxwell G <gotmax@e.email> - 1-8.1
changelog:
  - Refactor %ansible_collection_url, %ansible_collection_install,
    %ansible_test_unit.
  - Specfiles no longer need to define %collection_namespace or %collection_name
    for the macros to work.
  - Add new %ansible_collections_dir, %ansible_roles_dir, and
    %ansible_collection_filelist macros.
  - Prepare to deprecate %ansible_collection_files
  - Undefine %_package_note_file to stop that file from leaking into collection
    artifacts.


author: Maxwell G <maxwell@gtmx.me> - 1-10
changelog:
  - %ansible_collection_install - disable spurious collections path warnings
  - ansible-packaging-tests - don't depend on pytest-forked with ansible-core 2.16
  - ansible-srpm-macros - include license file in the package


author: Simone Caronni <negativo17@gmail.com> - 011.3-5
changelog:
  - Remove all EL7 / Python 2 conditionals.
  - Trim changelog.
  - Format SPEC file and sort all Requires/BuildRequires.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.4.1-1
changelog:
  - Update to 1.4.1 (BZ 1985582)
  - Fix some spec warnings
  - Add rpmlintrc to avoid hardcoded-library-path error


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Miroslav Suchý <msuchy@redhat.com> 1.103-1
changelog:
  - update copr keys
  - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys
  - Add CentOS 10 and EPEL 10 GPG keys
  - add Alpine Linux and postmarketOS keys


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 1.22.6-1
changelog:
  - Update dpkg to 1.22.6
  - Drop dpkg-fsys-usrunmess as it is not required on properly usr-merged systems
    and pulls in perl as a dependency.


author: Simone Caronni <negativo17@gmail.com> - 1.22.15-3
changelog:
  - Clean up SPEC file.
  - Adjust Requires and BuildRequires.
  - Update configure options.
  - Fix all tests except one.


author: Luya Tshimbalanga <luya@fedoraproject.org> - 39.0.5-1
changelog:
  - Update to 39.0.5
  - Set conditional for kde-filesystem build dependency
  - Drop unused pngquant dependency


author: Chris Kelley <ckelley@redhat.com> - 54-1
changelog:
  - [maven-release-plugin] prepare release oss-parent-54 (Tatu Saloranta)
  - Release 54 (Tatu Saloranta)
  - ... (Tatu Saloranta)
  - Update release notes (Tatu Saloranta)
  - Bump maven-project-info-reports-plugin from 3.4.3 to 3.4.4 (dependabot[bot])
  - Bump maven-enforcer-plugin from 3.2.1 to 3.3.0 (dependabot[bot])
  - Bump maven-install-plugin from 3.1.0 to 3.1.1 (dependabot[bot])
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Packit <hello@packit.dev> - 55-1
changelog:
  - [maven-release-plugin] prepare release oss-parent-55 (Tatu Saloranta)
  - Prepare for releasing v55 (Tatu Saloranta)
  - Bump org.apache.maven.plugins:maven-shade-plugin from 3.5.0 to 3.5.1 (dependabot[bot])
  - Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0 (dependabot[bot])
  - Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.3.0 to 3.4.1 (dependabot[bot])
  - Bump maven-site-plugin from 4.0.0-M8 to 4.0.0-M9 (dependabot[bot])
  - Update Maven for wrapper (Tatu Saloranta)
  - Update release notes (Tatu Saloranta)
  - Bump maven-clean-plugin from 3.2.0 to 3.3.1 (dependabot[bot])
  - Update release notes (Tatu Saloranta)
  - Bump maven-shade-plugin from 3.4.1 to 3.5.0 (dependabot[bot])
  - update release notes (Tatu Saloranta)
  - Bump version.plugin.surefire from 3.1.0 to 3.1.2 (dependabot[bot])
  - Bump maven-project-info-reports-plugin from 3.4.4 to 3.4.5 (dependabot[bot])
  - Update release notes (Tatu Saloranta)
  - Bump maven-release-plugin from 3.0.0 to 3.0.1 (dependabot[bot])
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Benjamin A. Beasley <code@musicinmybrain.net> 0.10-28
changelog:
  - Update License field to SPDX
  - Additionally, correct the License field for the -doc subpackage to
    reflect its dual license.


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-8
changelog:
  - Bootstrap the compiler for EPEL9
  - Disable building .pdf documentation (missing dependencies on EPEL9)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2.2-10
changelog:
  - Add a patch to fix IDE-related non-executable files being installed to /usr/bin
  - Add a patch to fix broken stack trace handling on aarch64
  - Use FPMAKEOPT for parallel compilation


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-4
changelog:
  - Modernize and clean up the spec file
  - Make it harder to miss any .so version change
  - Properly install the license file
  - Remove an obsolete sed-patch
  - Move documentation and examples to a -doc subpackage
  - Build PDF instead of HTML documentation


author: Sandro <devel@penguinpee.nl> - 3.0.12-7
changelog:
  - Apply security patches
  - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288)
  - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292)
  - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296)


author: Jens Petersen <petersen@redhat.com> - 2.6.5-1
changelog:
  - ghc-deps.sh: ghc-9.8 prof fixes adapted from mimi1vx (opensuse)
  - improve ghc-info.sh with a show mode


author: Jens Petersen <petersen@redhat.com> - 2.6.6-1
changelog:
  - new no-prof subpackage to disable building prof subpackages locally
  - cabal_test: drop conditional since it is in cabal-rpm


author: Jens Petersen <petersen@redhat.com> - 2.6.7-1
changelog:
  - fix no-prof subpackage to undefine with_ghc_prof properly
  - cabal_configure: when subpackaging print subpackage header
  - cabal_configure: use --enable-library-profiling instead of -p


author: Jens Petersen <petersen@redhat.com> - 2.6.8-1
changelog:
  - fixup cabal_configure: when subpackaging print subpackage header
  - ghc_set_gcc_flags: no need to redefine/re-export CFLAGS and LDFLAGS
  - cabal_configure: drop cabal --version
  - os: define ghc_haddocks for haskell_setup
  - no-prof: add a ghc_profiling override


author: Jens Petersen <petersen@redhat.com> - 2.7.2-1
changelog:
  - improve ghc_delete_rpaths to delete trailing :_libdir
  - extra: add ghc_merge_filelist from ghc.spec


author: Maxwell G <maxwell@gtmx.me> - 3.3.0-1
changelog:
  - Update to new source git source
  - Remove go_mod_vendor.prov from this package. It's already upstream.
  - Add -L flag to %gometa and %gorpmname
  - Add direct dependency on go-rpm-macros-golist-symlink


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 3.5.13-1
changelog:
  - Update to 3.5.13 - Closes rhbz#2225797 rhbz#2171486 rhbz#2170782
    rhbz#2236640 rhbz#2243321 rhbz#2248266 rhbz#2251230


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Neal Gompa <ngompa@fedoraproject.org> - 39.1-1
changelog:
  - Add fontconfig snippet to enable RGBA subpixel rendering for KDE
  - Reland: feat: remove KDE Action Restrictions
  - Set the default theme for sddm


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)
  - Add Keama migration utility (rhbz#2250608)


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Yuriy Kohut <ykohut@almalinux.org> - 0.8-2.20250228
changelog:
  - Update pes-events.json and config.json (except almalinux-kitten, centos):
   - solve valgrind-docs, valgrind-scripts with valgrind package conflicts during 8to9 upgrade
  - Bump the package release


author: Yuriy Kohut <ykohut@almalinux.org> - 0.9-1.20250505
changelog:
  - Update data to the upstream most recent state:
   - Device driver deprecation data:
    - leapp-repository sha 9c621a91199c093f603ef30ba3daf59010c20e47
   - PES data:
    - pes-events.json: upstream state ffd6d8e456484630f99d98d5bff955914af02aa5
    - epel_pes.json_template:
     - remove duplicated id and set_id
  - Install rpm public GPG key(s) into distro specific path
  - Bump the package version


author: wally <wally> 5.3.5-1.mga10
changelog:
  + Revision: 2024685
  - new version 5.3.5
  + daviddavid <daviddavid>
  - rebuild for new jsoncpp 1.9.5
  - rebuild for new zxing-cpp 2.1.0


author: wally <wally> 5.3.5-2.mga10
changelog:
  + Revision: 2024993
  - force jsoncpp req via cmake
  - force system xsd
  - drop unmaintained pkg-conf .pc files


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.12-1
changelog:
  - New version
    Resolves: rhbz#2316447
  - Dropped privileges when operating on user files
    Resolves: CVE-2024-47191


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: Paul Howarth <paul@city-fan.org> - 1.10.0-4
changelog:
  - In 8.8 OpenSSH disabled sha1 rsa-sha keys out of the box,
    so we need to re-enable them as a workaround for the test
    suite until upstream updates the tests
    See: https://github.com/libssh2/libssh2/issues/630
  - Drop other test workarounds, none of them being needed any longer


author: Paul Howarth <paul@city-fan.org> - 1.11.0-1
changelog:
  - Update to 1.11.0 (rhbz#2211200)
    - Adds support for encrypt-then-mac (ETM) MACs
    - Adds support for AES-GCM crypto protocols
    - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    - Adds support for RSA certificate authentication
    - Adds FIDO support with *_sk() functions
    - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    - Adds Agent Forwarding and libssh2_agent_sign()
    - Adds support for Channel Signal message libssh2_channel_signal_ex()
    - Adds support to get the user auth banner message libssh2_userauth_banner()
    - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
      AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    - Adds wolfSSL support to CMake file
    - Adds mbedTLS 3.x support
    - Adds LibreSSL 3.5 support
    - Adds support for CMake "unity" builds
    - Adds CMake support for building shared and static libs in a single pass
    - Adds symbol hiding support to CMake
    - Adds support for libssh2.rc for all build tools
    - Adds .zip, .tar.xz and .tar.bz2 release tarballs
    - Enables ed25519 key support for LibreSSL 3.7.0 or higher
    - Improves OpenSSL 1.1 and 3 compatibility
    - Now requires OpenSSL 1.0.2 or newer
    - Now requires CMake 3.1 or newer
    - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    - SFTP: No longer has a packet limit when reading a directory
    - SFTP: Now parses attribute extensions if they exist
    - SFTP: No longer will busy loop if SFTP fails to initialize
    - SFTP: Now clear various errors as expected
    - SFTP: No longer skips files if the line buffer is too small
    - SCP: Add option to not quote paths
    - SCP: Enables 64-bit offset support unconditionally
    - Now skips leading \r and \n characters in banner_receive()
    - Enables secure memory zeroing with all build tools on all platforms
    - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    - Speed up base64 encoding by 7x
    - Assert if there is an attempt to write a value that is too large
    - WinCNG: fix memory leak in _libssh2_dh_secret()
    - Added protection against possible null pointer dereferences
    - Agent now handles overly large comment lengths
    - Now ensure KEX replies don't include extra bytes
    - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    - Fixed possible buffer overflow in keyboard interactive code path
    - Fixed overlapping memcpy()
    - Fixed Windows UWP builds
    - Fixed DLL import name
    - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    - Support for building with gcc versions older than 8
    - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    - Restores ANSI C89 compliance
    - Enabled new compiler warnings and fixed/silenced them
    - Improved error messages
    - Now uses CIFuzz
    - Numerous minor code improvements
    - Improvements to CI builds
    - Improvements to unit tests
    - Improvements to doc files
    - Improvements to example files
    - Removed "old gex" build option
    - Removed no-encryption/no-mac builds
    - Removed support for NetWare and Watcom wmake build files
  - Avoid use of deprecated patch syntax
  - Build static library but don't package it since it's required for the
    test suite (https://github.com/libssh2/libssh2/issues/1056)
  - Remove redundant references to %{_libdir} from pkgconfig file
  - Add patch to work around strict permissions issues for sshd tests


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-3
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: David Abdurachmanov <davidlt@rivosinc.com> - 16.0.6-9
changelog:
  - Add support for riscv64
  - Fix build error: '/usr/bin/ld: bad -plugin-opt option' on riscv64.
  - Lower memory consumption on riscv64
  - Disable LTO (ld.gold not supported on riscv64)


author: Simone Caronni <negativo17@gmail.com> - 1.18.8-1
changelog:
  - Update to 1.18.8, switch to Meson.
  - Update docs installation.
  - Drop gcc/python-devel build requirements.
  - Avoid exclude directives in the files section so build ids are not duplicated.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.18.8-3
changelog:
  - Remove all symlinks in previous -devel subpackage in %pre_trans
    to ensure update transaction (#2123422)


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Pavel Raiskup <praiskup@redhat.com> 5.5-1
changelog:
  - allow chroot_scan to create archive instead of directory (tkopecek@redhat.com)
  - handle greedy options in Bash completion
  - fix root_cache invalidation (not) triggered by config changes
  - new '{{ repo_arch }}' Jinja2 template support
  - package_manager: disable %-interpolation in dnf.conf parser
  - only `chown` the in-chroot home files with the --rebuild mode
  - all non-privileged actions performed wiht EGID=135 (mock group)
  - mock newly requires a precise version of mock-filesystem
  - allow shadow-utils to run in buildroot by exception if necessary (martjack@redhat.com)
  - hw_info now reports file system type (vondruch@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 5.6-1
changelog:
  - scm: Open stdout in text mode for Git timestamp subprocesses
    (fedora.dm0@gmail.com)
  - always set ownership of homedir (but not recursively) (msuchy@redhat.com)
  - Do not create temporary Buildroot.tmpdir for disabled nosync
    (praiskup@redhat.com)
  - bash-completion: add mock-parse-buildlog (pastalian46@gmail.com)
  - Rewrites "original_name" method to check if "cls" has a "backmap"
    (nikitych@yandex.ru)
  - Don't use --allowerasing for more DNF commands (frostyx@email.cz)
  - bash-completion: pre-build the list of mock known options
    (praiskup@redhat.com)
  - Avoid Traceback for resultdir ENOSPC (praiskup@redhat.com)
  - Post-release administrivia (praiskup@redhat.com)
  - Fix Version in %changelogs (praiskup@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 41.3-1
changelog:
  - move anolis-7 to eol directory (msuchy@redhat.com)
  - move opensuse-leap-15.4 to eol directory (msuchy@redhat.com)
  - configs: the stream9 image is "ready" for Mock bootstrap
  - enable bootstrap container for CentOS Stream 10 (carlwgeorge@gmail.com)
  - configs: replace `powerpc64le` with `ppc64le` in the `%_host_cpu` macro
  - fix EOL template locations for CentOS7/EPEL7 (thomas.mendorf@ebf.com)


author: Pavel Raiskup <praiskup@redhat.com> 41.5-1
changelog:
  - Fedora 39 EOL
  - fix openSUSE-tumbleweed update failure during the second build (duli4868@gmail.com)
  - use non development bootstrap image for CentOS Stream 10 (romain.geissler@amadeus.com)
  - remove ELN ResilientStorage repos (yselkowi@redhat.com)
  - update ELN bootstrap image (yselkowi@redhat.com)
  - Add epel and epel-testing repos to the EPEL 10 config (carlwgeorge@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Adam Williamson <awilliam@redhat.com> - 4.6^20220615git8ea2059-1
changelog:
  - Update to latest git, re-sync spec
  - Backport PR #4710 to fix perl 5.36 warnings on @_ use in signed subs


author: Adam Williamson <awilliam@redhat.com> - 4.6^20220615git8ea2059-3
changelog:
  - Backport PR #4784 to fix a worker startup bug
  - Backport PR #4785 to add pagure.io and GNOME gitlab trackers


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-28
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix the build by moving desktop files from kde4/services/ServiceMenus/ to kservices5


author: Łukasz Wojniłowicz <lukasz.wojnilowicz@gmail.com> - 1.7.4-14
changelog:
  - Set dmenu-wayland and dmenu to Recommends instead of Requires to have
    a choice to install one or the other or both. Helpful when using Wayland
    and having xorg-x11-server-Xorg for XWayland purpose only.
    Resolves: rhbz#2335143


author: Peter Georg <peter.georg@physik.uni-regensburg.de> - 1.7.4-15
changelog:
  - Only recommend wl-clipboard if libwayland-client is installed
  - Only recommend xclip if xorg-x11-server-Xorg is installed


author: Christophe Fergeau <cfergeau@redhat.com> - 1.7.4-3
changelog:
  - adjust wl-copy/xclip requires so that they are actually installed when needed
    Resolves: rhbz#1996323


author: Peter Georg <peter.georg@physik.uni-regensburg.de> - 1.7.4-6
changelog:
  - Set wl-copy/xclip requires to recommends
    Resolves: rhbz#2022909
  - Cherry-pick upstream commit handling wl-copy/xclip selection


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Relax bogus blead test failures
    - Add reverse test: if @Barewords are covered on keywords.h
    - Move some @Barewords not in keywords.h to @BarewordsExtra
    - Add %main, %CORE, %CORE::GLOBAL:: to @Hashes
    - Fixed versions for EQ, CORE, state, break, given, when, default, UNITCHECK


author: Paul Howarth <paul@city-fan.org> - 20220215-1
changelog:
  - Update to 20220215 (see CHANGES.md for details)
  - Add workaround for bogus dependencies generated on EL-7


author: Sérgio Basto <sergio@serjux.com> - 1.0.21-9.nmu1
changelog:
  - Mail::Box::Manager, Mail::Sendmail and Compress::Zlib is only needed for
    podebconf-report, if program needs the perl module and it is not installed,
    it will send a warning, so these perl modules are optional.


author: Steve Traylen <steve.traylen@cern.ch> - 4.10.0-3
changelog:
  - New bcond flag to disable/enable soupsieve dependency
  - New bcond flag to disable/enable testing
  - Test module loading in check section


author: Packit <hello@packit.dev> - 1.2.14-1
changelog:
  - Drops seemingly unused importlib-metadata dev dep (Colin Dean)
  - Fixes comment on which version is development branch (Colin Dean)
  - Adds Pythons dropped notice to changelog (Colin Dean)
  - Drops limitation on tox < 4 since bug was fixed (Colin Dean)
  - Adds srpm_build_deps to Packit config (Colin Dean)
  - Try explicitly setting AppVeyor image to VS2022 (Colin Dean)
  - Exclude pypy3 on ppc64le on Travis builds (Colin Dean)
  - Drops old Pythons and adds newer ones for Appveyor build (Colin Dean)
  - Drop the .9 from pypy3 in tox.ini (Colin Dean)
  - Use specifically pypy3.9 v7.3.9 (Colin Dean)
  - Adds Python 3.12 config to tox (Colin Dean)
  - Limit tox to <4 on Travis because of outdatedness (Colin Dean)
  - Try installing importlib_metadata for tox run (Colin Dean)
  - Use newer Travis environment, Focal (Ubuntu 20.04) (Colin Dean)
  - Adds importlib-metadata to dev deps (Colin Dean)
  - Split and fix tox config for more better coverage (Colin Dean)
  - Dropping support for Python older than v3.7 in build systems like pytest and tox, while ensuring the library remains production-compatible. (Colin Dean)
  - Drops Python 2.7, 3.5, 3.6 builds from Travis; add 3.12 (Colin Dean)
  - Upgrades some actions versions in Actions python builds (Colin Dean)
  - Drops Actions builds for Python 2.7, 3.5, 3.6; condense 3.7+ (Colin Dean)
  - Bump checkout to v3 in CodeQL Analysis workflow (Colin Dean)
  - Add support for Python 3.11 (Hugo van Kemenade)
  - edit changelog (Pierrick Rambaud)
  - add test for D213 docstrings (Pierrick Rambaud)
  - work with empty docstring (Pierrick Rambaud)
  - fix: digest D212 and D213 docstring (Pierrick Rambaud)
  - Add support for Python 3.10 (Hugo van Kemenade)
  - Prepare next version 1.2.14 (unreleased) (Laurent LAPORTE)
  - Minor change in bumpversion  configuration to also bump the project version in "appveyor.xml". (Laurent LAPORTE)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4-1
changelog:
  - Update to 0.4 (close RHBZ#2220948)
  - Upstream switched from setuptools to flit_core: pyproject-rpm-macros no
    longer handles LICENSE.txt


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.0-6
changelog:
  - EPEL9: allow python-setuptools_scm 6.0.1
  - Skip test_fallback, as upstream does for Python 2.7, due to the
    downgraded setuptools-scm version.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.3.0-1
changelog:
  - Update to 0.3.0 (close RHBZ#2152320)
  - We can now rely on pyproject-rpm-macros >= 1.2.0
  - The LICENSE.txt file is now handled in pyproject_files
  - The setuptools_scm 7 patch is now merged upstream


author: Miro Hrončok <mhroncok@redhat.com> - 1:1.1-8
changelog:
  - Use standard library unittest.mock instead of 3rd party mock
  - Add subpackages with Python extras: lxml genshi chardet all


author: Ondrej Mosnáček <omosnacek@gmail.com> - 4.0.0-2
changelog:
  - Fix the install command to comply with guidelines
  - Use %{pyproject_[save_]files}
  - Fix EPEL9 build


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-1
changelog:
  - Upgrade to version 0.9.0 rhbz#2348855
  - Replaces the previous workaround for Python 3.14 rhbz#2327982


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.2-1
changelog:
  - Update to 2.5.2; accommodate upstream’s switch to hatchling build backend
  - Add a build conditional for the tests


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Miro Hrončok <mhroncok@redhat.com> - 20.21.1-1
changelog:
  - Update to 20.21.1
  - Backport from 20.23.0: Don't install setuptools and wheel to Python 3.12+ environments
  - Add RPM Requires needed for Python 3.12


author: Miro Hrončok <miro@hroncok.cz> - 20.21.1-6
changelog:
  - When getting wheels for /usr/bin/python3 interpreter, look for them in
    proper directories
  - Fixes: rhbz#2272958


author: Lumir Balhar <lbalhar@redhat.com> - 20.21.1-12
changelog:
  - Prevent command injection by quoting template strings in activation
    scripts
  - Fixes: rhbz#2328747


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1:0.36.2-7
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 4.0.7-3
changelog:
  - Require the exact same version-release of python3-yubikey-manager
  - Do not install docs to site-packages
  - Remove superfluous runtime dependency on python3-setuptools


author: Nils Philippsen <nils@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Update license
  - Make using click, pygit2, rpm Python packages optional and enable
    fallbacks


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.6.0-24
changelog:
  - F-36: rebuild against ruby31
  - modernize spec file, especially move %gem_install to %build
    to fix FTBFS with package_notes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.21.3-12
changelog:
  - resolves: RHEL-101766 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.21.3-7)


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 9.5-5
changelog:
  - Added Testing repo and fix path for local updates
  - Added ARM and Server Certified subpackages
  - Update License file for Certified variants


author: Maxwell G <gotmax@e.email> - 2021.12.17-1
changelog:
  - Update to 2021.12.17. Fixes rhbz#2033616.
  - Properly own shell completions directories
  - Remove obsolete epel6 code.


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


author: Orion Poplawski <orion@nwra.com> - 1:6.0.36-1
changelog:
  - Update to 6.0.36 (CVE-2024-42330 rhbz#2329219, CVE-2024-42332 rhbz#2329222,
    CVE-2024-42333 rhbz#2329225)


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


